Skip to Content.
Sympa Menu

grouper-users - [grouper-users] Prevent PSPNG from provision include/exclude/sor to AD

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Prevent PSPNG from provision include/exclude/sor to AD


Chronological Thread 
  • From: Pregash J Devasagayam <>
  • To: "" <>
  • Subject: [grouper-users] Prevent PSPNG from provision include/exclude/sor to AD
  • Date: Wed, 1 Mar 2017 00:09:40 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Hi all,

 

We had thought we had seen a configuration setting that prevented groups with certain suffixes from being provisioned to a resource in the past, but can’t seem to find it now.  We are using the include/exclude group type on a number of groups, and we are in the middle of transitioning from our own in-house group provisioning logic to using pspng for our Active Directory.  In our testing we see that the _includes, _excludes, _systemOfRecord, and the _systemOfRecordAndIncludes groups all get provisioned to the active directory along with the final composite group.  We just want the final composite group to be provisioned and anything with those suffixes to be ignored. 

 

Any ideas?

 

Thanks,

 

Pregash Devasagayam

OIT Identity and Access Management

University of Colorado Boulder




Archive powered by MHonArc 2.6.19.

Top of Page